Privacy Policy - Ask Orla

Ask Orla is operated by Oxford Circus Digital. Invoices and billing documents will show Oxford Circus Digital as the merchant of record.

This page explains what data Ask Orla collects, how we use it, and the choices you have. We've kept it short and plain. If anything is unclear, email hello@askorla.ai.

What we collect

Account information: your email address and any name you provide at signup.
Store data: data we read from the integrations you connect, such as Shopify, Google Analytics, Search Console and Merchant Centre. This includes orders, products, traffic, search and feed data needed to answer your questions.
Usage data: the questions you ask Orla, responses generated, and basic product analytics (pages visited, features used, error logs).
Billing information: processed by Stripe, or by Shopify Billing for subscriptions purchased through the Shopify App Store. We never see or store your full card details.

How we use your data

To power Orla's AI responses and recommendations.
To operate, secure and improve the Ask Orla service.
To send transactional emails (welcome, trial status, billing).
To provide customer support when you contact us.

We do not sell your data. We do not use your store data to train third-party foundation models.

Third party services

We share the minimum data needed with trusted providers:

Anthropic, PBC (United States) - AI model processing to generate responses to your questions.
Stripe, Inc. (United States) - subscription payment processing.
Supabase, Inc. (United States) - database, authentication and backend hosting.
Resend, Inc. (United States) - transactional email delivery.
Google LLC (United States) - read-only access to GA4, Search Console and Merchant Centre data you choose to connect.
Shopify, Inc. (Canada) - read-only access to the store you connect. We never write to, modify, or delete any data in your Shopify store. Shopify data is accessed only to answer your questions and is not stored permanently or shared with any party other than Anthropic for response generation. For merchants who install via the Shopify App Store, subscription billing is handled by Shopify Billing within your Shopify admin.
Cloudflare, Inc. (United States) - edge hosting and security.

International data transfers

Some of our subprocessors are based in the United States. When we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses where required.

Your rights

You can, at any time:

Request an export of the personal data we hold about you.
Delete your account and the data associated with it.
Disconnect any integration from your settings.
Ask us to correct inaccurate data.

To exercise any of these, email hello@askorla.ai.

If you are based in the UK and are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Legal basis for processing

We process your personal data on the following legal grounds:

Contract performance: to provide the Ask Orla service you have signed up for.
Legitimate interests: to improve the product, prevent abuse, and send relevant product communications.
Legal obligation: where required by law.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data and connected store data within 30 days, except where we are legally required to keep records (for example, billing records held for up to 7 years).

Conversation history with Orla is stored so you can refer back to it. You can clear it from your settings at any time.

Cookies

We use a small number of essential cookies to keep you signed in and to remember session state. We use lightweight product analytics to understand how the app is used and to fix bugs. We do not run advertising or cross-site tracking cookies.

Contact

Questions or concerns? Email hello@askorla.ai and we'll get back to you.